Categories Desktop Apps For You

Wireshark

Name: Wireshark
Rating: 5 (8 reviews)

3.0.7

05 December 2019

Network protocol analyzer.

Overview

Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.

Wireshark has a rich feature set which includes the following:

Standard three-pane packet browser
Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
The most powerful display filters in the industry
VoIP analysis
Live capture and offline analysis are supported
Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
Capture files compressed with gzip can be decompressed on the fly
Hundreds of protocols are supported, with more being added all the time
Coloring rules can be applied to the packet list, which eases analysis

What's new in Wireshark

Version 3.0.7:

The following bugs have been fixed:

ws_pipe_wait_for_pipe() can wait on closed handles.
Support for 11ax in PEEKREMOTE.
The temporary file … could not be opened: Invalid argument.
Reassembling of the two TLS records is not working correctly.
Display Filter Area: Dropdown Missing pkt_comment and tcp.options.sack_perm (likely others).
Display Filter autocompletion should be disabled.
BGP Linkstate IP Reachability information is incorrect.
NGAP: ExpectedUEActivityBehaviour decode error.
HomePlug AV dissector: MMTYPE and FMI fields are dissected incorrectly.
JPEG files cannot be saved on Windows with french language.
X11 --display interpreted as --display-filter which maps to -Y option.
"Create new file automatically after" not working with extcap.
Encrypted TLS alerts sometimes listed as decrypted.
The "Remove Wireshark from the system path" package has "Add Wireshark to the system PATH" as its title.
tshark -T ek -x causes get_field_data: code should not be reached.
Crash on Go → Next/Previous Packet in Conversation when no packet is selected.